Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: CWby7ug0mhvzm+gzyt8ivgrmaW7f+jZ4figALeqIyxQ=
Subject key identifier: DF:25:D0:87:8E:0B:F5:AB:25:3E:C3:0C:FE:18:B2:5F:DE:85:D4:29
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019699E176422AD4E8106520E65678EE33CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0851
Signing time: Sun 04 May 2025 06:00:11 +0000
Manifest this update: Sun 04 May 2025 06:00:11 +0000
Manifest next update: Mon 05 May 2025 06:00:11 +0000
Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: Uwxq/xgLaWOk0pyqykepB5sfFpeW3bpImBabxLYk26w=)
2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:e1:76:42:2a:d4:e8:10:65:20:e6:56:78:ee:33:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: May 4 06:00:11 2025 GMT
Not After : May 5 06:00:11 2025 GMT
Subject: CN=df25d0878e0bf5ab253ec30cfe18b25fde85d429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:d9:9d:93:6d:53:55:61:8f:cd:f4:4a:fb:
67:07:b5:74:99:f4:aa:24:e8:54:51:39:3f:30:d6:
da:2c:2e:2c:16:a8:5f:03:06:b1:f2:bc:60:75:fc:
75:65:e5:66:ec:a5:99:3e:3e:8f:04:44:ea:a3:49:
76:26:df:0d:30:22:26:bd:e2:53:23:a7:ab:29:10:
ba:7d:a4:49:c2:74:22:d1:bf:2a:6b:e3:15:fc:0d:
f3:ae:d0:18:33:ff:07:54:34:26:ae:6d:04:a6:d0:
78:09:43:bb:15:69:98:76:be:2e:97:8e:9d:ea:92:
41:60:9a:eb:89:3f:22:b8:0f:e2:4e:23:16:51:40:
99:88:aa:36:d3:9f:63:df:47:b1:13:36:44:dd:14:
b4:e7:f3:98:3d:e9:5f:de:f8:90:34:49:7a:c0:b2:
ed:da:5c:90:93:87:24:c9:2c:8e:aa:2e:29:63:a0:
89:dd:e7:88:ae:59:5f:4b:ac:3b:0d:79:6f:af:8b:
c8:75:ec:04:0d:26:04:7e:c8:4c:68:91:65:3b:aa:
7d:46:7d:60:0f:96:33:1c:6b:6a:0a:0e:6c:8c:84:
5e:5c:8e:5c:f8:14:c1:80:7d:c6:73:b3:07:05:fd:
0e:e0:e2:ec:90:9a:7f:47:54:e3:ab:ca:d8:ee:e0:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:D0:87:8E:0B:F5:AB:25:3E:C3:0C:FE:18:B2:5F:DE:85:D4:29
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:96:4c:f5:e6:78:ba:1b:e0:b3:e2:c7:29:3a:51:23:e9:e0:
9f:1d:b8:31:d7:c9:dc:c0:a3:d3:1d:ee:b8:5a:63:f2:a2:31:
c1:d2:a1:29:01:91:a9:ae:7a:b3:55:5b:29:7f:f8:00:ca:b9:
e8:4b:6d:5f:3f:2e:73:56:b3:cd:22:93:73:be:8e:59:c1:e6:
19:4e:5d:6f:a7:98:31:fe:5d:82:8f:32:7e:7a:21:da:c0:08:
ff:c8:2d:6f:fb:77:c5:f5:97:90:73:9c:1f:35:8b:6b:05:d4:
ae:1c:6f:21:5d:88:f9:1e:7a:10:8e:bb:dc:9e:d2:bd:d5:1e:
51:6e:6e:79:dd:6f:3e:b9:1d:bc:1b:1c:1f:4b:bd:4c:a8:e4:
d0:22:8e:28:a7:eb:47:75:c0:9f:83:43:c9:9c:2f:24:de:6a:
bc:1f:53:6c:52:82:ea:71:15:52:50:33:6d:a7:a7:64:18:78:
4d:ed:d6:9f:2c:94:54:1c:27:f7:5f:c5:2b:2a:96:6e:6c:d9:
3f:be:5d:c1:f3:27:7d:a3:f9:4f:88:89:f4:bc:05:e9:e2:d6:
90:b4:c7:08:b7:08:c9:71:79:6d:38:c6:7a:59:ef:b4:ea:b1:
b0:3c:6f:ec:36:e0:99:95:84:2d:56:e9:62:c4:a9:76:ae:74:
74:94:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:31:01 2025 by rpki-client